Alternatives and similar repositories for APTv4_Defcon28

Users that are interested in APTv4_Defcon28 are comparing it to the libraries listed below

• DefensiveOrigins / APT-Lab-FastOpticsSetup
  Scripts to threat optics stack quickly / abbreviated and automated. Run after APT-Lab-Terraform
  ☆13Updated 5 years ago
• swimlane / PSAttck
  PSAttck is a light-weight framework for the MITRE ATT&CK Framework.
  ☆38Updated 4 years ago
• cnotin / m365_groups_enum
  Enumerate Microsoft 365 Groups in a tenant with their metadata
  ☆55Updated 4 years ago
• ReconInfoSec / adversary-emulation-map
  Creates an ATT&CK Navigator map of an Adversary Emulation Plan
  ☆17Updated 4 years ago
• n3l5 / irMempull
  PowerShell Memory Pulling script
  ☆19Updated 10 years ago
• chihebchebbi / Azure-Sentinel-Hive-Playbook
  Send High & New Incidents to The Hive incident management Platform
  ☆18Updated 4 years ago
• mlgualtieri / PurpleTeamSummit
  ☆28Updated 4 years ago
• mdsecactivebreach / Invoke-ProcessScan
  Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.
  ☆15Updated 8 years ago
• IceMoonHSV / Sim
  C# User Simulation
  ☆33Updated 3 years ago
• Retrospected / kerbmon
  Continuous kerberoast monitor
  ☆45Updated 2 years ago
• Securityinbits / cheatsheet
  These are some of the commands which I use frequently during Malware Analysis and DFIR.
  ☆24Updated 2 years ago
• FortyNorthSecurity / Presentations
  Any presentation we've given at FortyNorth Security
  ☆34Updated 4 years ago
• DefensiveOrigins / AutoSPFRecon
  Automatic Sender Policy Framework Reconnaissance
  ☆19Updated 7 years ago
• Manticore-Platform / manticore-cli
  Manticore Adversary Emulation Cli
  ☆47Updated 5 years ago
• airman604 / splunk_whisperer
  ☆33Updated 7 years ago
• yasser-alghamdi / winterfell-hunt
  Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…
  ☆15Updated 5 years ago
• s0lst1c3 / awae
  ☆16Updated 8 years ago
• cylentsec / Nessusploitable
  Parses Nessus .nessus files for exploitable vulnerabilities and outputs a report file in format MM-DD-YYYY-nessus.csv
  ☆42Updated 5 months ago
• freeload101 / Bloodhound-Portable
  Bloodhound Portable for Windows
  ☆53Updated 2 years ago
• OTRF / bloodhound-notebooks
  Notebooks created to attack and secure Active Directory environments
  ☆27Updated 6 years ago
• threatexpress / threatbox
  ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of …
  ☆76Updated last year
• NVISOsecurity / nviso-cti
  ☆44Updated 6 months ago
• nettitude / PoshC2_IOCs
  A list of IOCs applicable to PoshC2
  ☆24Updated 5 years ago
• RiccardoAncarani / bloodhound-playbook
  Reproducible and extensible BloodHound playbooks
  ☆44Updated 6 years ago
• tasooshi / exfilkit
  Data exfiltration utility for testing detection capabilities
  ☆57Updated 4 years ago
• tsale / BlueSploit
  BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.
  ☆32Updated 6 years ago
• mvelazc0 / PurpleSpray
  PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpo…
  ☆51Updated 6 years ago
• akapv / Sysmon_to_AdvancedHunting_KQL
  ☆10Updated 5 years ago
• jwillyamz / ezEmu
  See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
  ☆107Updated 2 years ago
• DefensiveOrigins / LABPACK
  Various components we use in labs
  ☆10Updated 5 years ago